Known vulnerabilities in Red Hat Single Sign-On - page 3

Vendor: Red Hat Inc.
Software: Red Hat Single Sign-On
Software CPE: cpe:2.3:a:red_hat:red_hat_single_sign-on:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 255
Public exploits: 19
Known exploited (KEV): 3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Red Hat Single Sign-On Red Hat Single Sign-On is affected by 255 known vulnerabilities: 2 critical, 31 high, 147 medium, 75 low Critical High Medium Low

Vulnerabilities (255)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU59661 - Observable discrepancy
CVE-2021-3642		 CWE-203 Low
No
No
 7.4.10 17.01.2022 SB2021080530
SB2022080830
SB2021121543
and 1 more
#VU59083 - Improper Access Control
CVE-2021-4133		 CWE-284 Low
No
No
 7.5.0, 7.5.1 22.12.2021 SB2021122206
SB2022012032
SB2022122807
and 2 more
#VU58198 - Exposure of sensitive information to an unauthorized actor
CVE-2021-40690		 CWE-200 Medium
No
No
 7.4.10, 7.5.1 16.11.2021 SB2021111622
SB2021111712
SB2022012032
and 37 more
#VU58178 - Files or Directories Accessible to External Parties
CVE-2021-3717		 CWE-552 Low
No
No
 7.4.10 16.11.2021 SB2021111608
SB2021111715
SB2022080830
and 3 more
#VU58177 - Resource exhaustion
CVE-2021-3629		 CWE-400 Medium
No
No
 7.4.10 16.11.2021 SB2021111607
SB2021111715
SB2022090932
and 5 more
#VU58176 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2021-37714		 CWE-835 Medium
No
No
 7.4.10 16.11.2021 SB2021111606
SB2021111715
SB2022012314
and 24 more
#VU56965 - Exposure of sensitive information to an unauthorized actor
CVE-2021-20289		 CWE-200 Low
No
No
 7.4.10, 7.5.1 30.09.2021 SB2021093015
SB2021093016
SB2021111715
and 5 more
#VU53530 - Insufficient Session Expiration
CVE-2021-3461		 CWE-613 Low
No
No
 7.4.7 25.05.2021 SB2021052530
SB2021060137
SB2021052053
and 3 more
#VU53529 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2021-3424		 CWE-451 Medium
No
No
 7.4.7 25.05.2021 SB2021052530
SB2021052053
SB2021052054
and 2 more
#VU28622 - Improper input validation
CVE-2018-14721		 CWE-20 High
No
No
 7.3.1 04.06.2020 SB2019101585
SB2019020720
SB2019050926
#VU22830 - Deserialization of Untrusted Data
CVE-2016-0750		 CWE-502 Medium
No
No
 7.2.1 19.11.2019 SB2018091110
SB2021040769
SB2017111658
and 1 more
#VU21706 - Insufficiently Protected Credentials
CVE-2019-3868		 CWE-522 Medium
No
No
 7.2.7, 7.3.1 10.10.2019 SB2019101007
SB2019042331
SB2019042332
and 2 more
#VU20068 - Exposure of sensitive information to an unauthorized actor
CVE-2018-14642		 CWE-200 Medium
No
No
 7.3.1 13.08.2019 SB2018091807
SB2019050926
#VU20035 - Permissions, Privileges, and Access Controls
CVE-2019-3805		 CWE-264 Low
No
No
 7.3.1 09.08.2019 SB2019080913
SB2019050926
#VU19943 - Deserialization of Untrusted Data
CVE-2018-12023		 CWE-502 Medium
No
No
 7.3.1 06.08.2019 SB2019052407
SB2019091718
SB2019092703
and 20 more
#VU19942 - Deserialization of Untrusted Data
CVE-2018-12022		 CWE-502 Medium
No
No
 7.3.1 06.08.2019 SB2019052407
SB2019091718
SB2019092703
and 18 more
#VU19938 - Deserialization of Untrusted Data
CVE-2018-11307		 CWE-502 High
No
No
 7.3.1 06.08.2019 SB2019052407
SB2019091718
SB2019092703
and 17 more
#VU35944 - Permissions, Privileges, and Access Controls
CVE-2019-3894		 CWE-264 High
No
No
 7.3.1 03.05.2019 SB2018062717
SB2019050926
#VU17777 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2018-14720		 CWE-611 Low
No
No
 7.3.1 19.02.2019 SB2018121501
SB2019052407
SB2019092703
and 21 more
#VU17776 - Server-Side Request Forgery (SSRF)
CVE-2018-14721		 CWE-918 Low
No
No
 7.3.1 19.02.2019 SB2018121501
SB2019052407
SB2019092703
and 23 more


Showing elements 41 - 60 out of 255